Edit

delegatedAdministrationRoleAssignment resource type

Namespace: microsoft.graph.tenantGovernanceServices

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents a role assignment configuration for delegated administration in a governance relationship. Specifies which security group in the governing tenant should be assigned which roles in the governed tenant. This resource is defined in the **delegatedAdministrationRoleAssignment ** property of governancePolicyTemplate.

Properties

Property Type Description
groupDisplayName String The display name of the security group referenced by the group navigation property. Server-populated and read-only; returns null if the referenced group has been deleted.
roleTemplates microsoft.graph.tenantGovernanceServices.roleTemplate collection A collection of role templates that define the roles to be assigned to the group in the governed tenant.

Relationships

Relationship Type Description
group group The security group in the governing tenant that will receive the role assignments in the governed tenant. This group must be role-assignable.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.tenantGovernanceServices.delegatedAdministrationRoleAssignment",
  "groupDisplayName": "String",
  "roleTemplates": [
    {
      "@odata.type": "microsoft.graph.tenantGovernanceServices.roleTemplate"
    }
  ]
}